Clubhouse for android turns out to be a trojan: Reports

The audio-chat app, Clubhouse, has surely gained a humongous popularity these days. This week marked the one-year anniversary of the invite-only audio social app, which has surpassed 13 million downloads. Clubhouse is currently only available on iOS, but an Android version is in development. On the Google Play Store, a fake Clubhouse app for Android has been found, and it contains the notorious BlackRock malware.

clubhouse app,clubhouse app android,clubhouse app blackrock malware,clubhouse app malware, clubhouse
The Clubhouse app does not yet have an Android version

Also read: Facebook, WhatsApp and Instagram down: Reports

 

According to a study by ESET researcher Lukas Stefanko of Irlenad, this malicious app can access login credentials from over 450 apps and even bypass SMS-based two-factor authentication. This app looks identical to the original Clubhouse app, with a design and user interface that could fool anyone.

 

More signs of this being a fake app, according to ESET, include the site’s use of HTTP rather than HTTPS and the domain name ending in.mobi rather than.com.

 

You might also like: CNIL to investigate the popular chat app – Clubhouse

 

“The website looks like the real deal. To be frank, it is a well-executed copy of the legitimate Clubhouse website. However, once the user clicks on ‘Get it on Google Play’, the app will be automatically downloaded onto the user’s device. By contrast, legitimate websites would always redirect the user to Google Play, rather than directly download an Android Package Kit, or APK for short,” Stefanko stated.

 

You might also like: Yet another taunt by Intel – ‘I Am Mac’ Actor Justin Long Praising PCs

 

The BlackRock trojan, which is notorious for stealing user credentials, is found in the app. The malware would use an overlay attack to steal the user credentials once it has been installed on the phone and every other vulnerable app has been installed. Twitter, WhatsApp, Facebook, Amazon, and Netflix are just a few of the famous apps that can be hacked.

 

You might also like: Cash App now enables users to send and receive Bitcoins without any transaction fee

 

The Clubhouse app does not yet have an Android version. There is one in the development, and it will be available on the Google Play Store once it is released. Due to the popularity of Clubhouse, or any new app for that matter, clone apps that are potentially dangerous usually appear.